CVE-2019-5830: Medium severity google chrome vulnerability
Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-5830?
CVE-2019-5830 is a vulnerability in Google Chrome prior to version 75.0.3770.80 that allows a remote attacker to leak cross-origin data via a crafted HTML page.
Which software versions are affected by CVE-2019-5830?
Google Chrome versions prior to 75.0.3770.80, Opensuse Backports sle-15, openSUSE Leap 15.0, openSUSE Leap 15.1, openSUSE Leap 42.3, Debian Debian Linux 10.0, Fedoraproject Fedora 29, Fedoraproject Fedora 30, and debian/chromium package versions 90.0.4430.212-1~deb10u1, 116.0.5845.180-1~deb11u1, 118.0.5993.117-1~deb11u1, 116.0.5845.180-1~deb12u1, 118.0.5993.117-1~deb12u1, 118.0.5993.117-1, and 119.0.6045.105-1 are affected.
What is the severity of CVE-2019-5830?
The severity of CVE-2019-5830 is medium with a CVSS score of 6.5.
How can I fix CVE-2019-5830 in Google Chrome?
Update Google Chrome to version 75.0.3770.80 or later to fix CVE-2019-5830.
How can I fix CVE-2019-5830 in other affected software?
For other affected software, update to the recommended versions provided by the respective vendors.